A Windows NT local user or administrator account has a default, null, blank, or missing password.

1. 1997-01-01 Published
2. 1999-01-01 First public exploit (Metasploit exploit/windows/local/current_user_psexec)

64.28% chance of exploitation in the next 30 days, higher than 99.2% of all scored CVEs (FIRST EPSS, 2026-11-08).

• Metasploit exploit/windows/local/current_user_psexec PsExec via Current User Token metasploit exploit, excellent rank, 1999-01-01
• Metasploit exploit/windows/local/powershell_remoting Powershell Remoting Remote Command Execution metasploit exploit, excellent rank, 1999-01-01
• Metasploit exploit/windows/local/wmi Windows Management Instrumentation (WMI) Remote Command Execution metasploit exploit, excellent rank, 1999-01-01
• Metasploit exploit/windows/smb/psexec Microsoft Windows Authenticated User Code Execution metasploit exploit, manual rank, 1999-01-01
• Metasploit auxiliary/scanner/smb/psexec_loggedin_users Microsoft Windows Authenticated Logged In Users Enumeration metasploit auxiliary, normal rank
• EDB-16374 Microsoft Windows - (Authenticated) User Code Execution (Metasploit) remote, 2010-12-02

• exchange.xforce.ibmcloud.com /vulnerabilities/CVE-1999-0504

• CVE List CVE-1999-0504
• NVD CVE-1999-0504

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.